Actions
Security #6306
closedmime: quadratic complexity in MimeDecAddEntity
Affected Versions:
Label:
CVE:
Git IDs:
Severity:
CRITICAL
Disclosure Date:
Description
Found by quadfuzz
500 kilobytes pcap takes 40 seconds to process, just spending time adding to a linked list
The fuzz input to fuzz_mimedecparseline is
content-Type:;boundary=; -- -- --
With the lines repeating many times
Solution to add to a linked list should be to keep the tail known
Files
Actions